Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,252
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
647B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Go
FiloSottile/mkcert
A simple zero-config tool to make locally trusted development certificates with any names you'd like.
BSD-3-ClauseOct 21, 2026 · metrics 2.10.0
Go
wagoodman/dive
A tool for exploring each layer in a docker image
MITOct 21, 2026 · metrics 2.10.0
Go
golang/groupcache
groupcache is a caching and cache-filling library, intended as a replacement for memcached in many cases.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
NuGet
StockSharp/StockSharp
Algorithmic trading and quantitative trading open source platform to develop trading robots (stock markets, forex, crypto, bitcoins, and options).
Custom licenseOct 20, 2026 · metrics 2.10.0
PyPI
facebookresearch/ParlAI
A framework for training and evaluating AI models on a variety of openly available dialogue datasets.
MITOct 18, 2026 · metrics 2.10.0
npm
reactstrap/reactstrap
Simple React Bootstrap 5 components
MITOct 17, 2026 · metrics 2.10.0
Maven
JetBrains/Exposed
Kotlin SQL Framework
Apache-2.0Oct 19, 2026 · metrics 2.10.0
crates.io
paritytech/substrate
Substrate: The platform for blockchain innovators
Apache-2.0Oct 22, 2026 · metrics 2.10.0
Go
Masterminds/squirrel
Fluent SQL generation for golang
Custom licenseOct 20, 2026 · metrics 2.10.0
Go · PyPI
uber-go/fx
A dependency injection based application framework for Go.
MITOct 21, 2026 · metrics 2.10.0
Maven
swagger-api/swagger-core
Examples and server integrations for generating the Swagger API Specification, which enables easy access to your REST API
Apache-2.0Oct 18, 2026 · metrics 2.10.0
npm
typestack/class-transformer
Decorator-based transformation, serialization, and deserialization between objects and classes.
MITOct 18, 2026 · metrics 2.10.0
npm
ai/size-limit
Calculate the real cost to run your JS app or lib to keep good performance. Show error in pull request if the cost exceeds the limit.
MITOct 22, 2026 · metrics 2.10.0
npm · Packagist
humhub/humhub
HumHub is an Open Source Enterprise Social Network. Easy to install, intuitive to use and extendable with countless freely available modules.
Custom licenseOct 19, 2026 · metrics 2.10.0
Go
gobwas/ws
A tiny WebSocket library for Go.
MITOct 21, 2026 · metrics 2.10.0
Go
manifoldco/promptui
Interactive prompt for command-line applications
BSD-3-ClauseOct 21, 2026 · metrics 2.10.0
Go
asaskevich/govalidator
[Go] Package of validators and sanitizers for strings, numerics, slices and structs
MITOct 21, 2026 · metrics 2.10.0
—
tiny-dnn/tiny-dnn
header only, dependency-free deep learning framework in C++14
Custom licenseOct 19, 2026 · metrics 2.10.0
npm
airbnb/ts-migrate
A tool to help migrate JavaScript code quickly and conveniently to TypeScript
MITOct 18, 2026 · metrics 2.10.0
npm
PaulLeCam/react-leaflet
React components for Leaflet maps
Custom licenseOct 20, 2026 · metrics 2.10.0
Go
kelseyhightower/envconfig
Golang library for managing configuration data from environment variables
MITOct 20, 2026 · metrics 2.10.0
Go
segmentio/ksuid
K-Sortable Globally Unique IDs
MITOct 21, 2026 · metrics 2.10.0
Packagist
nikic/FastRoute
Fast request router for PHP
Custom licenseOct 20, 2026 · metrics 2.10.0
NuGet
JoshClose/CsvHelper
Library to help reading and writing CSV files
Custom licenseOct 20, 2026 · metrics 2.10.0
Packagist
PHP-FFMpeg/PHP-FFMpeg
An object oriented PHP driver for FFMpeg binary
MITOct 20, 2026 · metrics 2.10.0
Packagist
jenssegers/agent
👮 A PHP desktop/mobile user agent parser with support for Laravel, based on Mobiledetect
MITOct 20, 2026 · metrics 2.10.0
npm
effector/effector
Business logic with ease ☄️
MITOct 21, 2026 · metrics 2.10.0
Go
uber-go/automaxprocs
Automatically set GOMAXPROCS to match Linux container CPU quota.
MITOct 21, 2026 · metrics 2.10.0
npm · Hex
blockscout/blockscout
Blockchain explorer for Ethereum based network and a tool for inspecting and analyzing EVM based blockchains.
Custom licenseOct 21, 2026 · metrics 2.10.0
Go
uber-go/dig
A reflection based dependency injection toolkit for Go.
MITOct 21, 2026 · metrics 2.10.0